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IN THE CLAIMS 
Please amend the claims as follows: 

Claim 1 (Currently Amended): A method of authentication and payment in an 
authentication and payment system that [[has]] includes a terminal, at least one server^ and a 
network connecting th e s e the terminal and the at least one server, the method that is carried 
out by the at least one server comprising the steps of: 

receiving a request for usage of a service from the terminal through the information 
network; 

selecting at least one situation from [[a]] plural situations [[of]] each of which 
identifies a cont e nt d e scrib e d network environment and a system policy, based on a 
description of a terminal network environment and a terminal system policy in a service 
certificate sent from the terminal , a n e twork environm e nt and a syst e m policy ; and 

changing a service procedure and/or or a message format to operate the authentication 
and payment system according to the selected situation. 

Claim 2 (Currently Amended): A terminal comprising: 

a receiver configured to receive a first certificate of service including r e lat e d 

information from an authentication and payment device and a digital signature through an 

information network; and 

a transmitter configured to manipulate generate a second certificate of service based 

on the first certificate of service , the to g e n e rat e a second certificate of service including 

identification information of the terminal^ and to transmit the second certificate of service to a 

service providing device through the information network. 
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Claim 3 (Currently Amended): A terminal in accordance with claim 2, wherein the 

second certificate of service is generated from all or a part of the first certificate of service; 

from all or a part of the first certificate of service and a pi e c e of n e w additional information 

add e d th e r e to ; from all or a part of the first certificate of service and [[a]] the digital signature 

add e d th e r e to ; or from all or a part of the first certificate of service , the additional and th e 

pi e c e of n e w information,, and the digital signature add e d th e r e to . 

Claim 4 (Currently Amended): A terminal in accordance with claim 3, wherein the 
second certificate of service is generated from identification information including at least 
one of an identifier of certification, an identifier of an authentication and payment device.^ and 
a digital signature of the authentication and payment device, which are extracted from the 
first certificate of service, [[form]] from the identification information and a pi e c e of n e w the 
additional information add e d th e r e to , or from the identification information^ [[and]] the pi e c e 
of n e w additional information^ and a digital signature add e d th e r e to . 

Claim 5 (Currently Amended): A terminal comprising: 

a usage history managing means unit configured to manage a usage history of a 
certificate of service distributed from an authentication and payment device through an 
information network , the usage history including information regarding at least one previous 
transaction ; and 

an acknowledgement m o ans unit configured to acknowledge to the authentication and 
payment device when the usage history satisfies conditions defined in the certificate of 
service. 
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Claim 6 (Currently Amended): A service providing device comprising: 

a receiver configured to receive a request for a service including a certificate of 
service sent from a terminal through an information network; [[and]] 

a controller configured to select a timing of providing the service in response to the 
request for the service from the terminal; and 

a transmitter configured to transmit a request for authentication and payment its e lf or 
wih with or without a digital signature to an authentication and payment device through the 
information network, and 

wherein the request for authentication and payment is [[to be]] formed from all or a 
part of the certificate of service or from all or a part of the certificate of service and additional 
a pi e c e of n e w information add e d ther e to . 

Claim 7 (Currently Amended): A service providing device in accordance with claim 

6, wherein the request for authentication and payment is formed from identification 
information including at least one of an identifier of the certificate of service, an identifier of 
the authentication and payment device and a digital signature of the authentication and 
payment device, which are extracted from the certificate of service, or from the identification 
information and a pi e c e of n e w the additional information add e d th e r e to ; A and the request for 
authentication and payment is [[to be]] transmitted itself or with or without a digital signature 
add e d th e r e to . 

Claim 8 (Currently Amended): A service providing device in accordance with claim 

7, further comprising: 

a controller configured to select timing of providing a s e rvic e in r e spons e to th e 
r e qu e st from th e t e rminal or timing of processing the request for authentication and payment 
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to the authentication and payment device, [[or]] and configured to simplify the processing of 
the request for authentication and payment. 

Claim 9 (Currently Amended): A service providing device in accordance with claim 
7, further comprising: 

another receiver configured to receive a first certificate of service from the terminal 
through the information network; and 

another transmitter configured to generate a second certificate of service by adding a 
pi e ce of n e w the additional information to the first certificate of service and to transmit the 
generated second certificate of service to the terminal through the information network. 

Claim 10 (Currently Amended): An authentication and payment device comprising: 
a certificate of service issuing m e ans for issuing unit configured to issue a certificate 
of service to an other device , the certificate of service indicating a maximum number of times 
the certificate of service may be used ; and 

a processing m e ans for proc e ssing unit configured to process at least one of 
verification of a request for authentication and payment sent from the other device through an 
information network, authentication of the received request for authentication and payment, 
permission for provision of a service that is requested by the request for authentication and 
payment, and payment for the provision of the service. 

Claim 1 1 (Currently Amended): An authentication and payment device in accordance 
with claim 10, wherein the certificate of service contains at least one piece of information of 
an identifier of the certificate of service, an identifier of the authentication and payment 
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device, an identifier of the other device, information of expiration date of the certificate of 
service, and information of a constraint of the service to the other device. 

Claim 12 (Currently Amended): An authentication and payment device in accordance 
with claim 1 0, further comprising: 

an information storing moans for storing unit configured to store all or a part of 
information which is inh e r e ntly to be contained in the certificate of service as a stored 
information, and 

wherein the certificate of service contains includes information of a location of the 
stored information in the information storing m e ans unit. 

Claim 13 (Currently Amended): An authentication and payment device in accordance 
with claim 10, further comprising: 

a transmitter configured to transmit the certificate of service to the other device in 
response to a request th e refrom from the other device or in accordance with a predetermined 
condition for transmission. 

Claim 14 (Currently Amended): An authentication and payment device in accordance 
with claim 13, wherein the certificate of service issuing m e ans updat e s unit is further 
configured to update a content of the certificate of service along with an updat e of based on 
updated information under control of the authentication and payment device, and the 
transmitter transmits the updated certificate of service to the other device. 

Claim 15 (Currently Amended): An operation method of an authentication and 
payment system including a terminal, a service providing device, an authentication and 
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payment device,, and an information network connecting these devices the terminal, the 
service providing device, and the authentication and payment device , comprising the steps of: 

receiving a request for use of a service from the terminal through the information 
network; 

analyzing a content of a certificate of service to be sent to the terminal, a network 
environment , and and/or a system operation policy; and 

adapting a service proc e dur es and/or procedure or a message formats format to at 
l e ast one of plural situations of the content of the certificate of service, the network 
environment^ and the system operation policy. 

Claim 16 (Currently Amended): A control information providing device comprising: 

r e c e iving m e ans of a receiver configured to receive a request for use of a service; 

analyzing m e ans of an analyzing unit configured to analyze a content of a certificate 
of service, a network environment , and and/or a system operation policy; and 

a control information generating m e ans unit configured to generate control 
information adaptiv e to at l e a s t on e of plural situations of based on the content of the 
certificate of service, the network environment^ and the system operation policy. 

Claim 17 (Currently Amended): A control information providing device in 
accordance with claim 1 6, further comprising: 

op e n m e ans an opening unit configured to open the control information generated by 
the control information generating means to the information network. 
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Claim 18 (Currently Amended): A control information providing device in 

accordance with claim 16 or 17, wherein the control information contains a pi e ce of includes 

information of an identifier. 
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